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RECEIVED 

CENTRAL FAX CENTER 

FEB 0 1 2008 

Amendments to the Claims 

Please amend the claims as follows: 

1 . (Currently amended) A method comprising: 

grouping single fields of a multiple-field source into a plurality of multiple-field 
keys (MFKs)_ofa search target having a plurality of multipl e fi e ld k e ys (MFKs K each 
MFK of the search target having single fields that correspond to single fields in one of a 
plurality of multiple-field vectors (MFVs) of entries in a data structure; 

generating a set of queries based, at least in part, on the MFKs, wherein each 
query includes one or more of the MFKs and wherein each query has a different MFK as 
a lead MFK; 

using a query to determine whether the non-wildcard values in the MFVs of an 
entry match the non-wildcard values in corresponding MFKs of the search target; and 

[[using,]] if no entry has non^wildcard values in the MFVs that match the 
corresponding non-wildcard values in the MFKs, then using the queries to determine 
whether the entry has non-wildcard values in a MFV that match the non-wildcard values 
in a corresponding lead MFK, plus remaining MFVs that match corresponding remaining 
MFKs based on matching the non-wildcard values and wildcard values. 

2. (Original) The method of claim 1 , wherein the entries of the data structure 

i 

are stored such that the MFVs that have non- wildcard values are located at the end of the 
entry. ~ 
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3 . (Original) The method of claim 1 , further comprising arranging the entries 
of the data structure so that the MFVs that have non-wildcard values are placed at the end 
of the entry. 

4. (Original) The method of claim 1 , wherein the non-wildcard values 
comprise a fixed value and/or a range of fixed values. 

5. (Original) The method of claim 1 ? further comprising: 
locating the entry having non- wildcard values in the MFV that match the 

non-wildcard values in the corresponding lead MFK, plus remaining MFVs that match 
corresponding remaining MFKs based on matching the non-wildcard values and wildcard 
values; and 

performing an operation associated with the located entry. 

6. (Original) The method of claim 1 , wherein the multiple-field source 
comprises a data packet having single fields in its header. 

7. (Original) The method of claim 6, wherein the operation comprises one of 
the following: dropping the data packet, mirroring, metering, traffic shaping, rate 
limiting, accounting, statistics gathering, providing quality of service (QoS), redirecting 
to a central processing unit (CPU) for further processing, or sampling a subset of the 
packets to a CPU. 

8. (Original) The method of claim 1 9 wherein fewer than all MFVs in the 
entries include one single field. ~3aflffltesu 
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9. (Original) The method of claim 1, wherein the MFV$ in the entries include 
two or more single fields. 

1 0. (Currently amended) An apparatus comprising: 

a data structure having a plurality of entries, wherein each entry has a group of 
multiple-field vectors (MFVs) that each include a number of single fields having all 
wildcard values or all non- wildcard values; and 

a search unit to group single fields of a multiple-field source into a s e arch targ e t 
feavfeg a plurality of multiple-field keys (MFKs) of a search target , each MFK having 
single fields that correspond to the single fields in [[in]] a corresponding MFV of the 
entries in the data structure, generate a set of queries based, at least in part, on the MFKs, 
wherein each query includes one or more of the MFKs and has a different MFK as a lead 
MFK, use a query to determine whether the non-wildcard values in the MFVs of an entry 
match the non- wildcard values in corresponding MFKs of the search target; and us e , and 
if no entry has non-wildcard values in the MFVs that match the corresponding 
non-wildcard values in the MFKs, using the queries to determine whether the entry has 
non-wildcard values in a MFV that match the non-wildcard values in a corresponding 
lead MFK, plus remaining MFVs that match corresponding remaining MFKs based on 
matching the non-wildcard values and wildcard values.. 

11. (Original) The apparatus of claim 10, wherein the entries of tie data 
structure are stored such that the MFVs that have non-wildcard values are located at the 
end of the entry. 
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12. (Original) The apparatus of claim 10, wherein the search unit arranges the 
entries of the data structure so that the MFVs that have non- wildcard values are placed at 
the end of the entry. 

1 3 . (Original) The apparatus of claim 1 0, wherein the non- wildcard values 
comprise a fixed value and/or a range of fixed values. 

14. (Original) The apparatus of claim 10, wherein the search unit locates the 
entry having non-wildcard values in the MFV that match the non-wildcard values in the 
corresponding lead MFK, plus remaining MFVs that match corresponding remaining 
MFKs based on matching the non- wildcard values and wildcard values; and performs an 
operation associated with the located entry; 

15. (Original) The apparatus of claim 1 0, wherein the multiple-field source 
comprises a data packet having single fields in its header. 

16. (Original) The apparatus of claim 15, wherein the operation comprises one 
of the following: dropping the data packet, mirroring, metering, traffic shaping, rate 
limiting, accounting, statistics gathering, providing quality of service (QoS), redirecting 
to a central processing unit (CPU) for further processing, or sampling a subset of the 
packets to a CPU. 

1 7. (Original) The apparatus of claim 1 0, wherein fewer than all MFVs in the 
entries include one single field. 

18. (Original) The apparatus of claim 10, wherein the MFVs in the entries 
include two or more single fields. 
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1 9. (Currently amended) An article of manufacture comprising: 

a machine- accessible medium including thereon sequences of instructions that, 
when executed, cause an electronic system to: 

group single fields of a multiple-field source into a plurality of multiple-field keys 
(MFKs) of a search target having multiple fi e ld - koya (MFKs) > each MFKofthe search 
target having single fields that correspond to single fields in one of a plurality of 
multiple-field vectors (MFVs) of entries in a data structure; 

generate a set of queries based, at least in part, on the MFKs, wherein each query 
includes one or more of the plurality of MFKs and wherein each query has a different 
MFK as a lead MFK; 

use a query to determine whether the non-wildcard values in the MFVs of an 
entry match the non-wildcard values in corresponding MFKs of the search target; and 

[[usej] if no entry has non-wildcard values in the MFVs that match the 
corresponding non- wildcard values in the MFKs, then use the queries to determine 
whether the entry has non-wildcard values in a MFV that match the non-wildcard values 
in a corresponding lead MFK, plus remaining MFVs that match corresponding remaining 
MFKs based on matching the non-wildcard values and wildcard values. 

20. (Original) The article of manufacture of claim 19, wherein the entries of 
the data structure are stored such that the MFVs that have non- wildcard values are 
located at the end of the entry. 

2 1 . (Original) The article of manufacture of claim 1 9, wherein the 
machine-accessible medium further comprises sequences of instructions that, when 
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executed, cause the electronic system to arrange the entries of the data structure so that 
the MFVs that have non-wildcard values are placed at the end of the entry. 

22. (Previously Presented) The article of manufacture of claim 1 9, wherein the 
non-wildcard values comprise a fixed value and/or a range of fixed values. 

23. (Original) The article of manufacture of claim 19, wherein the 
machine-accessible medium further comprises sequences of instructions that, when 
executed, cause the electronic system to: 

locate the entry having non-wildcard values in the MFV that match the 
non-wildcard values in the corresponding lead MFK, plus remaining MFVs that match 
corresponding remaining MFKs based on matching the non-wildcard values and wildcard 
values; and 

perform an operation associated with the located entry. 

24. (Original) The article of manufacture of claim 1 9, wherein the 
multiple-field source comprises a data packet having single fields in its header. 

25. (Original) The article of manufacture of claim 24, wherein the operation 
comprises one of the following: dropping the data packet, mirroring, metering, traffic 
shaping, rate limiting, accounting, statistics gathering, providing quality of service (QoS), 
redirecting to a central processing unit (CPU) for further processing, or sampling a subset 
of the packets to a CPU. 

26. (Original) The article of manufacture of claim 19, wherein fewer than all 
MFVs in the entries include one single field. 
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27, (Original) The article of manufacture of claim 24, wherein the MFVs in 
the eDtries include two or more single fields, 

28. (Previously Presented) A system, comprising: 
i a processor; 

a network interface coupled with the processor; and 

an article of manufacture comprising a machine-accessible medium including 
thereon sequences of instructions that, when executed, cause an electronic system to: 

group single fields of a multiple-field source into a plurality of multiple-field keys 
(MFKs) of a search target h aving a plurality of multiple field keys (MFKs) > each MFK - 
of the search target having single fields that correspond to the single fields in one of a 
plurality of multiple-field vectors (MFVs) of entries in a data structure; 

generate a set of queries based, at least in part, on the MFKs, wherein each query 
includes one or more of the plurality of MFKs and has a different MFK as a lead MFK; 

use a query to determine whether the non-wildcard values in the MFVs of an 
entry match the non-wildcard values in corresponding MFKs of the search target; and 

[[use,]] if no entry has non-wildcard values in the MFVs that match the 
corresponding non-wildcard values in the MFKs, then use the queries to determine 
whether the entry has non-wildcard values in a MFV that match the non-wildcard values 
in a corresponding lead MFK, plus remaining MFVs that match corresponding remaining 
; MFKs based on matching the non-wildcard values and wildcard values. 

29. (Previously Presented) The system of claim 28, wherein the non- wildcard 
values comprise a fixed value and/or a range of fixed values. 
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3 0. (Previously Presented) The system of claim 2 8 , wherein the multiple-field 
source comprises a data packet having single fields in its header. 
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